I like CNN's take on the story:
http://edition.cnn.com/2015/12/18/politics/juniper-networks-...
Obviously it must be either Russia or China - NSA couldn't possibly be responsible ;)
http://edition.cnn.com/2015/12/18/politics/juniper-networks-...
Obviously it must be either Russia or China - NSA couldn't possibly be responsible ;)
</sarcasm>
Much like the difference between forcing sites to hand over SSL certs and breaking SSL, there's a gulf between compromising hardware that you have physical access to and compromising the software stack at the source.
In this case I wouldn't be surprised if that turned out to be the narrative, but the "NSA can accomplish anything" position is a narrative that plays into their favor.
You know that they could have their own programmers working there, or just approach, bribe or blackmail, an existing programmer to compromise the software (e.g. one found with child porn on his HD).